Static task
static1
Behavioral task
behavioral1
Sample
3b3540c2a7436e9f93896127e493df5d68092d211449f9a5394ee377ed15b480.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b3540c2a7436e9f93896127e493df5d68092d211449f9a5394ee377ed15b480.exe
Resource
win10v2004-20240412-en
General
-
Target
3b3540c2a7436e9f93896127e493df5d68092d211449f9a5394ee377ed15b480
-
Size
333KB
-
MD5
ddf18eb8bd524ec2ef176c474f7dc846
-
SHA1
6be09e1c83cdfc7e8a4cce28d3d20d57eafe81a6
-
SHA256
3b3540c2a7436e9f93896127e493df5d68092d211449f9a5394ee377ed15b480
-
SHA512
99fc2242d2e0ddbf0c70ae279102423ceb5caa40ff0372e2f3cbbb40dc444fc2150f89fd841f7d90b4d2c0b1fe59bc72dcf04965cd3d0e5e558766b9f7cb0aa3
-
SSDEEP
6144:aDOxZXrSHXUTsIHt+KLJ11+rkZp17pPiHHaZJY0Dhbm9UZoMiv/YKkL:lXa8sIM0J1kQfqnQJfJBKQ
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3540c2a7436e9f93896127e493df5d68092d211449f9a5394ee377ed15b480
Files
-
3b3540c2a7436e9f93896127e493df5d68092d211449f9a5394ee377ed15b480.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE